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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) [[An]] The audit system of claim 13 wherein 

comprising: 

a storage component configured to store: 

a set of business processes describing the operations of an enterprise, each 
business process including one or more business functions, each business function being 
assigned to one or more employees in a set of employees; and 

a compatibility registry including a sot of business function 
incompatibiliti e s, e ach busin e ss function incompatibility identifying at least two busin e ss 
functions that should not b e simultaneously assigned to a single employee; and 

the at least one processing component in communication with the storage 
component, the at least one processing component being is further configured to: 

compare at least one business function incompatibility in the compatibility 
registry with the business functions assigned to each employee in the a set of employees in the 
enterprise ; and 

create a report identifying at least one employee in the set of employees 
that is simultaneously assigned to business functions that are identified as incompatible as per the 
at least one business function incompatibility. 

2. (Canceled) 

3. (Previously Presented) The audit system of Claim 1, wherein the report 
further includes an identification of the at least one business function incompatibility. 

4. (Previously Presented) The audit system of Claim 1, wherein the at least 
one processing component is further configured to run a set of workflow-enabled applications 
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having a set of functions adapted to implement the set of business processes, such that an 
assignment of business functions to an employee in the set of employees enables the employee to 
access corresponding functions in the set of functions that implement said business functions. 

5-7. (Canceled) 

8. (Previously Presented) The audit system of Claim 1, wherein an employee 
in the set of employees is assigned to a new business function, and wherein the at least one 
processing component is further configured to create an alert in response to the new business 
function matching at least one business function incompatibility. 

9. (Previously Presented) The audit system of Claim 8, wherein the alert is 
communicated to an auditor. 

10. (Previously Presented) The audit system of Claim 8, wherein the alert 
includes an identification of the employee assigned to the new business function. 

1 1 . (Previously Presented) The audit system of Claim 8, wherein the alert 
includes an identification of the at least one business function incompatibility matching the new 
business function. 

12. (Previously Presented) The audit system of claim 8, wherein the at least 
one processing component is further configured to prevent the assignment of another new 
business function to the employee in response to the new business function matching the at least 
one business function incompatibility. 

13. (Currently Amended) An audit system for an enterprise, the audit system 

comprising: 

a storage component configured to store: 

a business process library comprising a plurality of business processes, 
each business process including one or more business functions, each business function being 
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associated with a list of one or more other business functions that are incompatible with said 
each business function; 

a set of business processes describing the operations of the specific to an 
enterprise , the set of business processes representing a subset of the plurality of business 
processes in the business process library ; and 

a business function compatibility registry fef specific to the enterprise that 
includes a set of business function incompatibilities, each business function incompatibility 
identifying at least two business functions that should not be simultaneously assigned to a single 
employee of the enterprise ; and 

at least one processing component in communication with the storage component, 
the at least one processing component being configured to: 

receive, from an auditor, a selection of a business process from the 
business process library for inclusion in the set of business processes ; and 

add the selected business process to the - sot of business processes 
d e scribing th e op e rations of the ent e rpris e ; and 

add a business function included in the selected business process and its 
associated list of incompatible business functions to the business function compatibility registry. 

14. (Previously Presented) The audit system of claim 13 wherein at least one 
business process in the business process library includes a parent business function and a child 
business function, and wherein the child business function inherits the list of incompatible 
business functions associated with the parent business function. 

15. (New) A computer-readable storage medium having stored thereon 
program code executable by a computer system, the program code comprising: 

code that causes the computer system to store a business process library 
comprising a plurality of business processes, each business process including one or more 
business functions, each business function being associated with a list of one or more other 
business functions that are incompatible with said each business function; 
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code that causes the computer system to store a set of business processes specific 
to an enterprise, the set of business processes representing a subset of the plurality of business 
processes in the business process library; 

code that causes the computer system to store a business function compatibility 
registry specific to the enterprise that includes a set of business function incompatibilities, each 
business function incompatibility identifying at least two business functions that should not be 
simultaneously assigned to a single employee of the enterprise; 

code that causes the computer system to receive, from an auditor, a selection of a 
business process from the business process library for inclusion in the set of business processes; 
and 

code that causes the computer system to add a business function included in the 
selected business process and its associated list of incompatible business functions to the 
business function compatibility registry. 
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